EY
EY

EY is a global professional services firm offering audit, tax, consulting, and advisory expertise. Its teams help organizations address complex business challenges, strengthen trust in financial reporting and markets, and use data and technology to support transformation.

The firm provides services including corporate finance advisory, transaction strategy, and technology consulting. EY works with clients across areas such as healthcare, legal services, marketing, energy, finance, and government, with sustainability and innovation informing many of its solutions.

Cyber Defense Detection and Response AI Manager — Bengaluru (Onsite)

Lead EY’s transformation of enterprise security operations centers through agentic AI, SIEM, SOAR, and XDR. Own client strategy, solution architecture, delivery, and cybersecurity innovation.

Description

  • Transform enterprise clients’ traditional SOCs into intelligent, AI-enabled security operations models.
  • Lead SOC transformation initiatives centered on agentic AI adoption.
  • Define AI-enabled SOC operating models spanning people, processes, and technology.
  • Assess SOC maturity and create transformation roadmaps.
  • Advise CISOs, SOC leaders, and other client stakeholders on strategy, value, and outcomes.
  • Architect and oversee agentic AI SOC solutions integrating SIEM, SOAR, XDR, and AI platforms.
  • Design AI agents for alert triage, investigation enrichment, incident summaries, reporting, and automated response orchestration.
  • Embed LLMs, RAG pipelines, and contextual data sources into SOC workflows.
  • Direct platform deployments, migrations, and optimization programs.
  • Identify and implement AI applications that improve SOC efficiency and detection quality.
  • Develop agentic workflows and multi-agent orchestration models.
  • Establish standards for prompt engineering, context management, and AI governance.
  • Lead multidisciplinary SOC engineering, detection engineering, and AI specialist teams.
  • Provide technical direction and mentorship.
  • Maintain delivery timelines, documentation, and expected outcomes.
  • Support capability development and internal knowledge sharing.
  • Run client workshops, demonstrations, and executive presentations.
  • Connect technical solutions to business outcomes and ROI narratives.
  • Contribute to thought leadership, solution accelerators, and reusable frameworks.

Requirements

  • Bring 8–12 years of experience in cybersecurity, SOC engineering, or detection and response, including leadership experience.
  • Demonstrate strong knowledge of SIEM, SOAR, and XDR platforms such as Microsoft Sentinel, Microsoft Defender, CrowdStrike, and Splunk.
  • Have delivered SOC transformations, platform implementations, or large-scale deployments.
  • Apply AI and LLM use cases to cybersecurity operations.
  • Integrate automation, APIs, and orchestration workflows within SOC environments.
  • Understand threat detection, incident response, and the MITRE ATT&CK framework.
  • Manage client stakeholders and lead strategic discussions.
  • Have experience with agentic AI frameworks such as LangChain, Semantic Kernel, or AutoGen.
  • Have exposure to Azure OpenAI, AI platforms, or cloud-native AI services.
  • Understand RAG architectures, embeddings, and semantic search.
  • Have designed AI copilots or automation solutions for SOC operations.
  • Have exposure to DevSecOps, cloud security, or modern security architectures.

Related Jobs